PT-2023-32705 · Software Ag · Software Ag Webmethods

Mohammedhashayka · Published 2023-12-07 · Updated 2024-05-17 · CVE-2023-6578

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Software AG WebMethods versions 10.11.x through 10.15.x

Description A critical vulnerability has been found, leading to improper access controls. The issue can be exploited remotely, and it appears that insufficient access control is depending on referrer header data. By manipulating the access to certain files, such as /assets/, an attacker may be able to bypass authentication and access sensitive information, including internal IPs, ports, and versions, by visiting /invoke/wm.server/connect. In some cases, entering a wrong value, like /assets/x, and then coming back to /assets/ may also reveal the requested data.

Recommendations For Software AG WebMethods versions 10.11.x through 10.15.x, consider restricting access to the wm.server/connect/ file and the /assets/ directory until a patch is available. As a temporary workaround, restrict access to the /invoke/wm.server/connect endpoint to minimize the risk of exploitation. Additionally, review and strengthen access controls based on referrer header data to prevent unauthorized access. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2023-6578

Affected Products

Software Ag Webmethods

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2023-6578 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6578 · Vendor Advisory
• https://vuldb.com/?id.247158 · Note
• https://vuldb.com/?ctiid.247158 · Note
• https://t.me/cvenotify/63494 · Telegram Post
• https://t.me/cvenotify/62882 · Telegram Post
• https://twitter.com/cracbot/status/1733259766762234158 · Twitter Post
• https://twitter.com/CVEnew/status/1732871099157766309 · Twitter Post